diff --git a/spiffe-tls/poetry.lock b/spiffe-tls/poetry.lock
index 4e557f3..87e924f 100644
--- a/spiffe-tls/poetry.lock
+++ b/spiffe-tls/poetry.lock
@@ -525,17 +525,18 @@ files = [
 
 [[package]]
 name = "pyopenssl"
-version = "24.3.0"
+version = "25.0.0"
 description = "Python wrapper module around the OpenSSL library"
 optional = false
 python-versions = ">=3.7"
 files = [
-    {file = "pyOpenSSL-24.3.0-py3-none-any.whl", hash = "sha256:e474f5a473cd7f92221cc04976e48f4d11502804657a08a989fb3be5514c904a"},
-    {file = "pyopenssl-24.3.0.tar.gz", hash = "sha256:49f7a019577d834746bc55c5fce6ecbcec0f2b4ec5ce1cf43a9a173b8138bb36"},
+    {file = "pyOpenSSL-25.0.0-py3-none-any.whl", hash = "sha256:424c247065e46e76a37411b9ab1782541c23bb658bf003772c3405fbaa128e90"},
+    {file = "pyopenssl-25.0.0.tar.gz", hash = "sha256:cd2cef799efa3936bb08e8ccb9433a575722b9dd986023f1cabc4ae64e9dac16"},
 ]
 
 [package.dependencies]
 cryptography = ">=41.0.5,<45"
+typing-extensions = {version = ">=4.9", markers = "python_version < \"3.13\" and python_version >= \"3.8\""}
 
 [package.extras]
 docs = ["sphinx (!=5.2.0,!=5.2.0.post0,!=7.2.5)", "sphinx_rtd_theme"]
@@ -764,4 +765,4 @@ test = ["covdefaults (>=2.3)", "coverage (>=7.2.7)", "coverage-enable-subprocess
 [metadata]
 lock-version = "2.0"
 python-versions = "^3.9"
-content-hash = "d7c23bf6eaf603cf45eebe21527dd9cf5a206457990590a1837017645b621e90"
+content-hash = "cec3148a17f784c7b4374f62df8f463f610f0388e8d4622ef4ef1977e7d7d467"
diff --git a/spiffe-tls/pyproject.toml b/spiffe-tls/pyproject.toml
index e4a913e..a4fcfd0 100644
--- a/spiffe-tls/pyproject.toml
+++ b/spiffe-tls/pyproject.toml
@@ -14,7 +14,7 @@ packages = [
 [tool.poetry.dependencies]
 python = "^3.9"  # >= 3.9, < 4.0
 spiffe = "~0.1.4"
-pyOpenSSL = "^24.0"
+pyOpenSSL = ">=24,<26"
 
 [tool.poetry.dev-dependencies]
 black = "^24.10"